vendor\uvdesk\core-framework\Security\TicketVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace Webkul\UVDesk\CoreFrameworkBundle\Security;
  5. use Symfony\Component\DependencyInjection\ContainerInterface;
  6. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
  10. class TicketVoter extends Voter
  11. {
  12.     const MEMBER_VIEW = 'AGENT_VIEW';
  13.     const CUSTOMER_VIEW = 'CUSTOMER_VIEW';
  15.     private $container;
  16.     private $decisionManager;
  18.     public function __construct(ContainerInterface $container, AccessDecisionManagerInterface $decisionManager)
  19.     {
  20.         $this->container = $container;
  21.         $this->decisionManager = $decisionManager;
  22.     }
  24.     protected function supports($attribute, $subject)
  25.     {
  26.         if (!in_array($attribute, [self::MEMBER_VIEW, self::CUSTOMER_VIEW])) {
  27.             return false;
  28.         }
  30.         return $subject instanceof \Webkul\UVDesk\CoreFrameworkBundle\Entity\Ticket;
  31.     }
  33.     protected function voteOnAttribute($attribute, $ticket, TokenInterface $token)
  34.     {
  35.         $user = $token->getUser();
  37.         if (!$user instanceof \Webkul\UVDesk\SupportBundle\Entity\User) {
  38.             return false;
  39.         }
  40.         
  41.         switch ($attribute) {
  42.             case self::MEMBER_VIEW:
  43.                 if ($this->decisionManager->decide($token, ['ROLE_ADMIN'])) {
  44.                     return true;
  45.                 } else if ($this->decisionManager->decide($token, ['ROLE_AGENT'])) {
  46.                     $userInstance = $user->getAgentInstance();
  47.                     dump($userInstance->getTicketAccessLevel());
  48.                     die;
  50.                     // switch ($userInstance->getTicketAccessLevel()) {
  51.                     //     case TICKET::AGENT_GLOBAL_ACCESS:
  52.                     //         return true;
  53.                     //     case TICKET::AGENT_GROUP_ACCESS:
  54.                     //         // $userGroupAccess = (bool)$user->getGroups()->contains($ticket->getGroup());
  55.                     //         // $userTeamAccess = (bool)$user->getUserSubGroup()->contains($ticket->getSubGroup());
  56.                     //         // $access = $userGroupAccess ? $userGroupAccess : $userTeamAccess;
  57.                     //         break;
  58.                     //     case TICKET::AGENT_TEAM_ACCESS:
  59.                     //         // $access = (bool)($user->getUserSubGroup()->contains($ticket->getSubGroup()));
  60.                     //         break;
  61.                     //     case TICKET::AGENT_INDIVIDUAL_ACCESS:
  62.                     //         return (bool) ($user->getId() === $ticket->getAgent()->getId());
  63.                     //         break;
  64.                     //     default:
  65.                     //         break;
  66.                     // }
  67.                 }
  69.                 break;
  70.             case self::CUSTOMER_VIEW:
  71.                 if ($ticket->getIsTrashed()) {
  72.                     return false;
  73.                 }
  74.                 
  75.                 if ($ticket->getCustomer() == $user) {
  76.                     return true;
  77.                 } else {
  78.                     // $flag = 0;
  79.                     // $collaborators = $ticket->getCollaborators();
  81.                     // if(count($collaborators)) {
  82.                     //     foreach ($collaborators as $collaborator) {
  83.                     //         if($collaborator == $user)
  84.                     //             $flag = 1;
  85.                     //     }
  86.                     //     if($flag)
  87.                     //         return true;    
  88.                     //     else
  89.                     //         return false;    
  90.                     // }
  91.                 }
  92.                 
  93.                 break;
  94.             default:
  95.                 break;
  96.         }
  98.         return false;
  99.     }
  101.     // protected function isGranted($attribute, $ticket, $user = null)
  102.     // {
  103.     //     if (!is_object($user)) {
  104.     //         return false;
  105.     //     }
  106.         
  107.     //     if($attribute == 'FRONT_VIEW') {
  108.     //         if($ticket->getIsTrashed())
  109.     //             return false;
  110.     //         if($ticket->getCustomer() == $user)
  111.     //             return true;
  112.     //         else {
  113.     //             $flag = 0;
  114.     //             $collaborators = $ticket->getCollaborators();
  115.     //             if(count($collaborators)) {
  116.     //                 foreach ($collaborators as $collaborator) {
  117.     //                     if($collaborator == $user)
  118.     //                         $flag = 1;
  119.     //                 }
  120.     //                 if($flag)
  121.     //                     return true;    
  122.     //                 else
  123.     //                     return false;    
  124.     //             }
  125.     //         } 
  126.     //     } else {
  127.             // if($user->getRole() == 'ROLE_AGENT') {
  128.             //     switch($user->getDetail()['agent']->getTicketView()){
  129.             //         case UserData::GLOBAL_ACCESS:
  130.             //             $access = true;
  131.             //         break;
  132.             //         case UserData::GROUP_ACCESS:
  133.             //             $userGroupAccess = (bool)$user->getGroups()->contains($ticket->getGroup());
  134.             //             $userTeamAccess = (bool)$user->getUserSubGroup()->contains($ticket->getSubGroup());
  135.             //             $access = $userGroupAccess ? $userGroupAccess : $userTeamAccess;
  136.             //         break;
  137.             //         case UserData::TEAM_ACCESS:
  138.             //             $access = (bool)($user->getUserSubGroup()->contains($ticket->getSubGroup()));
  139.             //         break;
  140.             //         case UserData::INDIVIDUAL_ACCESS:
  141.             //         default:
  142.             //             $access = (bool)($ticket->getAgent() == $user);
  143.             //         break;
  144.             //     }
  145.             //     if(!$access)
  146.             //         $access = (bool)($ticket->getAgent() == $user);
  147.             //     return $access;    
  149.             //     // if($ticket->getAgent() == $user)
  150.             //     //     return true;
  151.             //     // else {
  152.             //     //     $flag = 0;
  153.             //     //     $agentGroups = $user->getGroups();
  154.             //     //     if($ticket->getGroup()) {
  155.             //     //         foreach ($agentGroups as $group) {
  156.             //     //             if($group->getId() == $ticket->getGroup()->getId())
  157.             //     //                 $flag = 1;
  158.             //     //         }
  159.             //     //         if($flag)
  160.             //     //             return true;    
  161.             //     //         else
  162.             //     //             return false;    
  163.             //     //     } else {
  164.                         
  165.             //     //     }
  166.             //     // } 
  167.             // } else {
  168.             //     return true;
  169.             // }
  170.     //     }
  171.     // }
  172. }